$ rpki-client -vvf rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft File: sCOWweSXbcJLufJA9c5Vbtgn-is.mft (raw, json) Hash identifier: Vde+z1LiKP5yfd5J60nYmIF2m2QDg7aisv+2iExljY4= Subject key identifier: D8:ED:DE:44:EB:A9:C0:68:99:E7:85:C0:2B:3A:78:B1:6C:37:14:E4 Authority key identifier: B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B Certificate issuer: /CN=A91124CD/serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft Manifest number: 012B Signing time: Sun 19 Oct 2025 07:24:22 +0000 Manifest this update: Sun 19 Oct 2025 07:24:21 +0000 Manifest next update: Sun 26 Oct 2025 07:24:21 +0000 Files and hashes: 1: sCOWweSXbcJLufJA9c5Vbtgn-is.crl (hash: 1N79olBQrkEsus8m+JDlOkDEmQG8Qc2nqjPhajcdQRQ=) 2: CC6220C0E02E11EEBA9D291AC4F9AE02.roa (hash: EfnXa4JTXRSQtpkoLm2l4ZqnMhuE0NVKwTVdEbOaaqM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:24:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91124CD, serialNumber=B02396C1E4976DC24BB9F240F5CE556ED827FA2B Validity Not Before: Oct 19 07:24:21 2025 GMT Not After : Oct 26 07:24:21 2025 GMT Subject: CN=68f49226-5d91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:82:77:c3:5b:db:7e:28:c1:90:9d:1c:04:86: 1c:48:4d:3f:70:2d:27:51:23:a7:a4:c7:d7:20:d6: 13:e2:16:0e:3a:d1:12:37:53:33:c9:08:b3:c9:6d: 61:b2:38:ae:b3:86:ae:7d:9c:90:d1:2e:13:9d:7c: 6a:df:95:0b:4a:8a:4e:cd:a3:ff:32:92:17:2e:c9: 2e:23:ec:7a:f2:09:e7:92:65:75:23:10:97:04:60: 06:c0:4e:d3:33:ff:6a:1c:73:88:ff:56:35:fe:38: cb:13:20:65:5a:cc:35:cd:55:8b:63:b4:89:1d:16: 6c:8e:d9:ed:54:5b:7a:12:0a:be:1b:a1:b2:98:a0: 47:63:2d:cb:11:ae:40:f6:94:c4:f2:ef:81:00:20: 10:6b:2e:44:a1:07:7a:8c:e7:2f:1f:e1:04:a0:0f: 6d:75:82:27:f5:50:4c:39:84:5e:a3:b4:a0:c5:9b: f8:63:e7:cf:f9:7d:88:6f:86:4f:42:a0:f3:14:ec: ec:eb:2f:b4:1a:11:4b:e4:b0:45:29:1c:a0:3d:bd: 0d:2f:f6:c7:60:65:4b:ad:eb:bc:94:4f:d3:c5:cc: fc:3e:79:91:dc:17:7f:b9:c8:38:24:05:e8:d4:bb: fa:f7:84:37:31:83:16:0e:c0:68:93:2a:5a:ea:e9: e5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:ED:DE:44:EB:A9:C0:68:99:E7:85:C0:2B:3A:78:B1:6C:37:14:E4 X509v3 Authority Key Identifier: keyid:B0:23:96:C1:E4:97:6D:C2:4B:B9:F2:40:F5:CE:55:6E:D8:27:FA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sCOWweSXbcJLufJA9c5Vbtgn-is.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91124CD/B97B7638E02D11EE9A042F5CC4F9AE02/sCOWweSXbcJLufJA9c5Vbtgn-is.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:90:57:c5:97:e6:c9:c8:be:c0:52:f3:56:31:f6:aa:37:fb: 37:37:38:bb:6a:e7:10:e5:f9:a7:20:cb:13:1c:8d:a3:e1:18: 14:c4:f9:9e:8e:2d:ad:6f:8d:69:75:f1:94:86:e9:25:cc:d0: 87:a0:1c:1c:9f:c1:28:75:8c:a9:67:5b:4a:dc:de:ac:cd:98: dd:09:22:64:88:d4:09:b8:9c:47:5c:2d:64:2a:77:6b:14:58: 04:e3:65:6b:d3:c2:28:c5:ec:9f:35:b3:f2:07:94:5d:ff:5b: 76:d4:31:db:00:78:de:ce:ea:58:67:f1:c5:c6:78:36:56:9f: 18:3c:2b:4f:fc:72:de:4f:2f:f1:19:58:a2:d4:d2:fd:7f:b9: 4a:69:6a:73:27:7a:b8:9c:ee:e5:c4:76:d3:8e:0e:70:3a:ae: 5f:c3:ee:0a:75:5c:62:f9:74:13:78:ac:f0:df:ef:bd:39:8e: 89:eb:3d:00:df:33:34:71:ea:e6:cd:e6:be:72:ab:b4:a6:28: ca:87:7c:50:2f:f3:8b:9a:95:d1:e6:c9:bd:ad:02:25:d7:03: 65:14:7c:cf:ee:86:75:d2:44:9d:79:54:ef:50:20:52:61:1c: f8:0b:3d:ea:b2:fb:cd:72:ab:56:c4:e5:a7:0a:b7:39:21:e2: a2:08:c7:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI0Q0QxMTAvBgNVBAUTKEIwMjM5NkMxRTQ5NzZEQzI0QkI5RjI0MEY1Q0U1NTZF RDgyN0ZBMkIwHhcNMjUxMDE5MDcyNDIxWhcNMjUxMDI2MDcyNDIxWjAYMRYwFAYD VQQDEw02OGY0OTIyNi01ZDkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuYJ3w1vbfijBkJ0cBIYcSE0/cC0nUSOnpMfXINYT4hYOOtESN1MzyQizyW1h sjius4aufZyQ0S4TnXxq35ULSopOzaP/MpIXLskuI+x68gnnkmV1IxCXBGAGwE7T M/9qHHOI/1Y1/jjLEyBlWsw1zVWLY7SJHRZsjtntVFt6Egq+G6GymKBHYy3LEa5A 9pTE8u+BACAQay5EoQd6jOcvH+EEoA9tdYIn9VBMOYReo7SgxZv4Y+fP+X2Ib4ZP QqDzFOzs6y+0GhFL5LBFKRygPb0NL/bHYGVLreu8lE/Txcz8PnmR3Bd/ucg4JAXo 1Lv694Q3MYMWDsBokypa6unlMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNjt3kTr qcBomeeFwCs6eLFsNxTkMB8GA1UdIwQYMBaAFLAjlsHkl23CS7nyQPXOVW7YJ/or MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjRDRC9COTdCNzYzOEUw MkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJjSkx1ZkpBOWM1VmJ0Z24t aXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NDT1d3ZVNYYmNKTHVmSkE5YzVWYnRnbi1pcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjRDRC9COTdCNzYzOEUwMkQxMUVFOUEwNDJGNUNDNEY5QUUwMi9zQ09Xd2VTWGJj Skx1ZkpBOWM1VmJ0Z24taXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQASkFfFl+bJyL7AUvNWMfaqN/s3Nzi7aucQ5fmnIMsTHI2j4RgUxPme ji2tb41pdfGUhuklzNCHoBwcn8EodYypZ1tK3N6szZjdCSJkiNQJuJxHXC1kKndr FFgE42Vr08IoxeyfNbPyB5Rd/1t21DHbAHjezupYZ/HFxng2Vp8YPCtP/HLeTy/x GVii1NL9f7lKaWpzJ3q4nO7lxHbTjg5wOq5fw+4KdVxi+XQTeKzw3++9OY6J6z0A 3zM0cermzea+cqu0pijKh3xQL/OLmpXR5sm9rQIl1wNlFHzP7oZ10kSdeVTvUCBS YRz4Cz3qsvvNcqtWxOWnCrc5IeKiCMcQ -----END CERTIFICATE-----Generated at Mon Oct 20 05:26:21 2025 by rpki-client